Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/u1W8hEZV_5g88_2OWbANQkMTS90.roa
File: u1W8hEZV_5g88_2OWbANQkMTS90.roa (raw, json)
Hash identifier: MuLW7qG1ng/SZHF+6NurD2acHFX3XTdak3CIUr4w+S8=
Subject key identifier: BB:55:BC:84:46:55:FF:98:3C:F3:FD:8E:59:B0:0D:42:43:13:4B:DD
Certificate issuer: /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial: 018CC5DC41306BBF28F62D798A896A20EABA
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/u1W8hEZV_5g88_2OWbANQkMTS90.roa
Signing time: Mon 01 Jan 2024 16:29:55 +0000
ROA not before: Mon 01 Jan 2024 16:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 185.216.13.0/24 maxlen: 24
2a13:6300::/32 maxlen: 32
2a13:6303::/32 maxlen: 32
2a13:6301::/32 maxlen: 32
2a13:6305::/32 maxlen: 32
2a13:6304::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:41:30:6b:bf:28:f6:2d:79:8a:89:6a:20:ea:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
Validity
Not Before: Jan 1 16:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb55bc844655ff983cf3fd8e59b00d4243134bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:c7:d8:8f:df:18:38:b1:fc:fa:42:e9:e6:
14:60:23:64:0a:fd:58:40:ef:23:57:ac:c1:e8:05:
1a:91:6c:72:36:c1:a4:0e:33:20:89:c1:6e:d0:87:
99:84:5f:f4:6e:56:33:48:6a:4c:96:18:df:9f:a2:
5c:2c:95:87:17:9a:8e:be:f7:1c:a6:db:5e:fa:10:
a0:c5:71:e2:28:c1:ac:cf:fa:0f:59:ca:05:ff:f3:
d8:c8:37:8a:22:67:08:9c:9e:a7:20:06:1f:18:fd:
94:e0:86:e1:2a:11:7e:5c:89:19:aa:11:01:07:c7:
a3:91:94:d5:1f:ec:f3:0b:f6:53:c5:f7:fb:00:f6:
52:06:49:02:4a:28:91:f5:e6:49:ad:18:66:bb:de:
b0:58:62:86:d6:c1:e9:1d:a7:4e:06:75:13:f6:c8:
cc:15:00:e4:bb:cf:d9:c3:dc:6f:53:72:33:ea:ae:
a3:79:a0:2a:02:37:03:7b:6c:1d:f8:0d:e9:9e:b4:
cb:1d:34:1f:7d:08:12:37:6d:24:0d:64:d7:b5:e1:
5e:9b:5b:b7:c3:5e:69:64:0c:11:03:02:9b:9a:c3:
bd:96:78:cd:ff:0c:d5:62:5c:0f:2c:28:bf:93:a1:
34:2b:47:f8:51:85:aa:41:42:62:1d:8a:9f:22:00:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:BC:84:46:55:FF:98:3C:F3:FD:8E:59:B0:0D:42:43:13:4B:DD
X509v3 Authority Key Identifier:
keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/u1W8hEZV_5g88_2OWbANQkMTS90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.13.0/24
IPv6:
2a13:6300::/31
2a13:6303::-2a13:6305:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
18:48:7d:ec:35:b7:4c:d9:91:51:45:cd:0d:ba:c0:d4:83:96:
4e:78:75:d2:a0:fe:8c:8a:97:f9:4b:31:40:31:be:ea:d7:a8:
a2:6f:e7:67:db:e3:e2:c6:e6:a4:b1:2a:e2:d1:a4:c1:28:89:
97:91:3a:72:31:76:83:53:81:6c:61:eb:01:2a:97:03:ff:a5:
5b:78:c5:ef:a8:b8:bf:51:a2:89:49:30:5b:dd:70:b2:e4:7d:
c4:4a:78:d0:41:ca:d1:fa:fa:79:68:65:b1:45:c9:bd:b0:5f:
89:28:22:71:11:a4:80:99:20:1c:b3:9b:79:7b:b7:6d:98:0d:
1f:2b:9b:2d:0b:4b:cd:1d:ae:1d:31:67:b3:56:b5:7a:fa:4d:
32:18:91:cd:60:20:ca:9c:a6:31:81:65:a2:fb:8e:71:7e:83:
f2:bb:70:85:e7:b3:e8:9c:c7:93:89:f4:56:6e:9e:1b:3c:78:
44:ab:e1:3f:cd:8a:18:e7:3d:1a:06:f9:9f:56:61:4b:74:7c:
fa:ec:44:d5:f3:ce:4c:db:ac:34:bb:d1:16:f0:99:1f:61:6f:
21:dd:9b:c7:dc:bf:39:39:a5:60:3a:a2:70:b0:93:9a:d0:25:
23:6d:67:71:c5:16:e5:bd:1a:d8:03:98:a7:f8:a6:87:bb:19:
39:10:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:43:45 2024 by rpki-client on console-fra.rpki-client.org